application security EngineerSolarWinds

Overview
SolarWinds is a leading provider of powerful and affordable IT management software to more than 300,000 customers worldwide ranging from Fortune 500 enterprises to small businesses. Our mission is to improve worker's productivity by making IT simpler!
We are looking for an Application Security Engineer to join our growing Information Security team. This individual will work under minimal supervision and will be the technical lead and subject matter expert for the secure implementation of applications deployed in the SolarWinds enterprise environment.
We are looking for an ideal candidate who possess a solid information security background and has a good foundation with conducting application security assessments and identifying application security threats in a global enterprise IT environment.
Responsibilities
Working with IT, business application, engineering, and DevOps teams to implement security best practices for threat modeling and pen testing of applications.
Conducting application security assessment scans to identify vulnerabilities and working with application owners to remediate.
Develop and implement workflows to automate security testing and vulnerability detection for business applications and products as part of the software development lifecycle
Working with the IT business application administrators, application developers, and DevOps teams to execute vulnerability scanning and pen testing activities and advising their teams on best practices for securing applications and web platforms
Own the vulnerability management lifecycle from identification and remediation to reporting.
Reviewing and updating security operations playbooks to ensure a consistent approach and response to current & emerging threats
Identifying operational security issues within the global enterprise IT environment and evaluating risk based on our enterprise risk framework.
Qualifications
3+ years of hands-on experience conducting application security assessments in an enterprise environment
Minimum 3-5 years of experience as a security administrator, engineer, or analyst in an enterprise environment
Technical and industry certifications or equivalent experience are a plus (CISA, CISM, CISSP, GIAC)
Solid understanding of cybersecurity "best practices" including principles, security protocols and standards material such as OWASP Top 10 and SANS Critical Security Controls
Excellent skills with application security testing tools such as: Burpsuite, OWASP ZAP, SQLMap, IDA Pro, Kali, etc.
Experience performing manual application source code security reviews for various languages such like Java, .Net (C#, VB#), C++
Experience with scripting languages such as: Python, bash, or Powershell
Experience with application security tools including DAST, SAST, Penetration testing, Fuzzing etc.
Experience with both a detailed technical knowledge and hands-on practice working in security engineering, DevOps, application penetration testing, and/or secure software.
SolarWinds

Fort Bonifacio, Makati City, Metro Manila
Permanent
Full-time